Tweak users administration for SSO

majak/settings/base.py

@@ -142,8 +142,8 @@ TAGGIT_CASE_INSENSITIVE = True
 
 AUTH_USER_MODEL = "users.User"
 
-WAGTAIL_USER_EDIT_FORM = "users.forms.UserEditForm"
-WAGTAIL_USER_CREATION_FORM = "users.forms.UserCreationForm"
+WAGTAIL_USER_EDIT_FORM = "users.forms.CustomUserEditForm"
+WAGTAIL_USER_CREATION_FORM = "users.forms.CustomUserCreationForm"
 WAGTAIL_PASSWORD_MANAGEMENT_ENABLED = False
 WAGTAIL_PASSWORD_RESET_ENABLED = False
 WAGTAILUSERS_PASSWORD_ENABLED = False

users/forms.py

-from django import forms
-from django.contrib.auth import get_user_model
+from wagtail.users.forms import UserCreationForm, UserEditForm
 
+DISABLED_FIELDS = ["sso_id", "first_name", "last_name", "email"]
 
-class UserCreationForm(forms.ModelForm):
-    class Meta:
-        model = get_user_model()
 
+class CustomUserCreationForm(UserCreationForm):
+    def __init__(self, *args, **kwargs):
+        super().__init__(*args, **kwargs)
+        for name in DISABLED_FIELDS:
+            self.fields[name].disabled = True
 
-class UserEditForm(forms.ModelForm):
-    class Meta:
-        model = get_user_model()
+
+class CustomUserEditForm(UserEditForm):
+    def __init__(self, *args, **kwargs):
+        super().__init__(*args, **kwargs)
+        for name in DISABLED_FIELDS:
+            self.fields[name].disabled = True

users/templates/wagtailusers/users/create.html

+{% extends "wagtailusers/users/create.html" %}
+{% load i18n %}
+
+{% block content %}
+  {% trans "Add user" as add_user_str %}
+  {% include "wagtailadmin/shared/header.html" with title=add_user_str icon="user" %}
+
+  <p class="nice-padding">Uživatele nelze přidat ručně. Vytvoří se při prvním přihlášení přes Pirátskou identitu.</p>
+{% endblock %}